Applicable from 1 July 2019 onwards.
The Beef Shorthorn Cattle Society (BSCS) is committed to protecting your privacy and security. This policy explains how and why we use your personal data we collect from you, to ensure you remain duly informed and in full control of your information.
This is in accordance with the General Data Protection Regulation which came into force on 25 May 2018.
We will never sell your personal data and will only ever share it with third party organisations we work with where necessary.
This policy describes how and why this personal data must be collected, handled and stored to meet the BSCS’s data protection standards and to comply with the law.
Consent will be collected in the form of tick boxes being added to the relevant paperwork, application forms, sale entry forms, registration forms, various order forms.
Any questions you have in relation to this policy or how we use your personal data should be sent either by email to email@example.com or addressed to The Data Protection Manager, The Beef Shorthorn Cattle Society, Society Pavilion, Avenue M, Stoneleigh Park, Kenilworth, Warwickshire CV8 2RG.
2) About us
BSCS is a registered Charity. Our Scottish Charity Number is SC019414 (Scotland).
Registered office is Chapelshade House, 78-84 Bell Street, Dundee, DD1 1RQ.
3) Information we collect
Personal data you have provided
Personal data includes name, address, postcode, date of birth, telephone, fax, mobile number, email address, signature, member number, CPH number/UK holding number/ministry ID, bank details, payments via cheques/BACS/Bank Transfer will collect some personal information, photographs and articles.
We obtain personal data about you when you:
make an enquiry to the BSCS.
join the BSCS as a new member.
purchase BSCS membership on behalf of someone else.
donate to the BSCS.
place an order to purchase goods or services from the BSCS, i.e. branded merchandise.
enter registered cattle for BSCS sale/show.
contact us to register calves.
We encourage young people to become members of the BSCS. If a new member application comes in for someone under the age of 18 years old, then a parent or legal guardian must give their consent by co-signing the application form for the individual to apply for membership.
If a junior member enters a show class or sells at an BSCS sale and is to be mentioned in the event/sale report, we will publish their name, address, herd prefix, photographs alongside the other winners. Parent/legal guardian will have to give consent on behalf of the junior member.
Events – under 18s or vulnerable persons
The parent or legal guardian will be asked to sign a disclaimer to say we may collect the under 18s or vulnerable person’s personal information including photographs, for us to compile and publish event reports.
For youth stock judging events we collect personal information for the participant such as name, address, email, phone number, date of birth. We may also take photographs at this event and therefore if the participant is under 18 we may ask their parents or guardian to sign to give us permission to collect and use this information for giving out prizes and for publishing event reports.
Information for parents/legal guardians
We take great care to protect the rights of individuals in relation to their personal data, especially in the case of children. If your child is under 18 years of age, we will only use his or her personal data with your consent. Once your child has achieved the age of 18 years, parental/legal guardians will no longer have to give consent as they will be classed as an adult and will have to give their own consent.
Information from third parties
We will at times throughout the year receive members personal data from third parties. This will come in to the BSCS office in the form of national and regional show results and BCCS show and sale results as well as photographic material. We may also receive personal information of non-members to contact them regarding membership.
Sensitive personal data
We do not normally collect or store sensitive personal data (such as information relating to health, beliefs or political affiliation). However, there are some situations where this may occur (e.g. if you have an accident at a BSCS meeting or event). If this does occur and we must record information, for example in an accident book, we will take extra care to ensure your privacy rights are protected.
Accidents or incidents
If an accident or incident occurs on our property or at one of our events, then we will keep a record of this (which may include personal data and sensitive personal data).
4) Where we store your personal data
All information you provide on paper is stored at the Society Pavilion, Avenue M, Stoneleigh Park, Kenilworth, Warwickshire CV8 2RG or at Christmas Farm, Glebe Road, Mears Ashby, NN6 0DL in secure filing cabinets and/or storage boxes held in locked premises and handled only by employees or sub-contractors of BSCS.
Members data is also stored electronically on the ‘ILR2’ Database and a unique password is given to each eligible member which enables them to access certain parts of the database. Members are responsible for keeping their password confidential. We ask you not to share your password with anyone. Only BSCS employees or sub-contractors can gain access to this database from BSCS computers via personal logins.
Members data may be stored in the form of electronic documents held on the BSCS Server which can only be accessed by BSCS employees or sub-contractors using BSCS computers via personal logins.
Data stored on ILR2 database and BSCS servers is held on Secure Servers located at Society Pavilion, Avenue M, Stoneleigh Park, Kenilworth, Warwickshire CV8 2RG. These servers are protected by a firewall and are backed up onto a NAS drive and in turn a daily backup of critical files is taken off site for disaster recovery purposes by the Office Manager or designated deputy. Data held at Christmas Farm, Glebe Road, Mears Ashby is held backed up on a NAS drive and backups are taken off site periodically for disaster recovery purposes by Ellie Doak.
Once we have received your information electronically, we will use strict procedures and security features to try to prevent unauthorised access. When using our website or online forms you are agreeing that we may track/record your IP address. We will store this information securely if retained in either electronic or paper format.
BSCS will ensure that the data members provide is not held for any longer than necessary and that the data members provide is processed in accordance with the rights of the data subjects and protected and processed in the appropriate ways.
5) How we process the information you provide
We only ever use your personal data with your consent, or where it is necessary to pursue legitimate interests.
We use personal data for administration purposes to keep records of existing members as up to date as possible on the ILR2 database.
To create records for new members on the ILR2 database including the supply of an individual membership number unique to each member.
Members data may be used to help produce the BSCS Accounts during the year.
Members data may be used to recommend judges for the BSCS at regional/national shows, sales and events.
Members data may be used to claim gift aid annually where permission has been granted by the member and will be shared with the BSCS accountants to process this claim.
To compile and publish the BSCS Herd Book. (This is a condition of membership.)
To promote the Beef Shorthorn Cattle Breed through promotional material including articles, features and photographic material published within BSCS Journals/Newsletters and promotional leaflets/posters.
To promote the Beef Shorthorn Cattle Breed through display stands at regional/national shows, sales and events.
To promote the Beef Shorthorn Cattle Breed through our website in the form of articles, features, show/sale results and photographic material.
To promote the Beef Shorthorn Cattle Breed through social network sites e.g. Facebook and Twitter including show/sale results and photographic material.
To create BSCS sale catalogues and produce sale reports for inclusion on our website and to be submitted to the regional and national press.
To process orders for branded promotional goods.
6) Uses made of the information
We use information held about you in the following ways:
To provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.
To carry out our obligations arising from any contracts between you and us.
To ensure that content from our site is presented in the most effective manner.
To allow you to use our online features of our service.
To notify you about changes to our service.
We do not disclose information about identifiable individuals to our advertisers, or other individuals outside the membership without prior consent from the individual member.
BSCS will ensure that members data is used for legitimate interests of the breed.
7) Disclosure of your information through third parties
By signing and returning the Society’s Data Sharing Letter we may disclose your personal information through our Society website.
There are some instances within the working year where we need to disclose your personal information to third parties these times are:
Members data may be published through the online database IRL2, BSCS website, social network sites, BSCS herd book, BSCS journals/newsletters, photographic material, promotional leaflets, sale catalogues, show results and sale reports to further the promotion and development of the breed.
At the completion of the routine newsletters/journals your data will be shared with a BSCS approved mailing house to co-ordinate the posting out of the newsletter/journals from our mailing lists.
If you order branded merchandise from us your data may be passed on to a third party who handles the production and mailing of the ordered promotional items to fulfil delivery of your items.
During quarter 1 of each year or when required, members data will be shared with the BSCS accountants and auditors for the preparation of accounts.
Members data is usually shared once a year with HMRC via the BSCS accountants to claim gift aid.
Members data will be passed to third parties i.e. BSCS nominated auction companies in the form of sale catalogues
Members data included on herd health declarations may be shared with their respective health scheme and BSCS nominated auction companies to verify the submitted details.
Members data will be used in the reporting of society sales, regional/national shows, events and passed to third parties e.g. the national/regional farming newspapers.
If members become representatives of BSCS by taking on the role of Director or as representatives on Society committees then their data may be published in the form of minutes and agendas to other members of the Society.
If a member/non-member is on our approved judges list, we will share personal information to recommend judges for sales and shows.
When sending your DNA samples for testing, we currently collect your name, address, telephone number, herd prefix and animal information, this information is on the sample bag and is shared with the Society’s designated testing laboratory.
If you are selected for an inspection, or request a grading up visit or classification visit then your personal details will be passed onto our approved inspectors to make contact and carry out the inspections. Where an inspection is carried out, for auditability a copy of the inspection sheet is given to the member being inspected, a copy kept with the inspector and a final copy is returned to the BSCS office to process further to evaluate against BSCS rules and articles of association. A copy of this inspection will be sent to Breedplan to input the weights into the ILR2 system.
The BSCS have a contract with Breedplan and they process data with respect to Breedplan for all our members, to allow them to do this efficiently they have access to parts of the ILR2 database including member information such as name, address, telephone numbers and email addresses to enable contact with you with respect to their services.
BSCS shares animal data from time to time with levy bodies to take part in various studies this may extend to some personal information being shared in the future to provide new trait information for all members.
The database that holds member information (ILR2) and some features of the BSCS website are provided by ABRI, therefore ABRI has access to this information to provide BSCS with support and maintenance.
Our IT infrastructure and services and our website are supported by API Consultancy Ltd and Spot On Creative and therefore they have temporary access to member information whilst providing BSCS with support and maintenance.
BSCS accounting software is provided by our sub-contractor, Morna Bell and our accountants, MMG Ltd and therefore Morna Bell and MMG Ltd have access to member information when providing BSCS with support and maintenance.
Should a dispute or complaint arise we may share personal information with the BSCS approved solicitors/lawyers and Insurance companies.
When you make a payment to BSCS, the BSCS bank or BACS payment information service may collect personal information to complete the transaction and notify BSCS of failed transactions.
8) Payment security
If you pay by direct debit, then your details are held on the accounting software which has restricted access, limited to employees and sub-contractors authorised to work with BSCS accounts.
Standing Order mandates that are completed at the point of new members joining the BSCS are not kept on site, they are processed and then sent direct to the bank of the joining member, however they may be photocopied or scanned for auditability should queries arise.
Payments made to BSCS by cheque are held securely until a suitable batch of cheques can be taken to the BSCS Bank to be paid into the account, photocopy of cheques are only kept when a cheque is returned to the member due to payment failure.
Paper Payment history is kept for seven years as per legal requirements.
9) Data retention/security
Currently BSCS is in the process of reviewing and updating data retention periods for various personal information and this policy will be updated to reflect this, in the interim should you have any questions regarding data retention please write or email to the Beef Shorthorn Cattle Society.
The Beef Shorthorn Cattle Society currently destroys any personal information on paper by shredding and any hard drives removed are wiped where possible and destroyed by physical means.
10) Your rights
You have the right to ask us not to process your personal data. You can exercise your right to prevent such processing by ticking certain boxes on the forms we use to collect your data. You can also exercise the right at any time by contacting us at the BSCS Office.
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
You have the right to complain to us in the first instance regarding use of your personal information, if you do not find our response satisfactory then you have the right to complain to the Information Commissioner’s Office (ICO), local contact details can be found at https://ico.org.uk/.
11) Access to information
The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act.
Any “subject access request” must be made in writing to the Data Protection Manager, Beef Shorthorn Cattle Society, Society Pavilion, Avenue M, Stoneleigh Park, Kenilworth, Warwickshire CV8 2RG. After receipt of any “subject access request” the process and anticipated time frame to fulfil the request will be specified in the acknowledgement letter but typically within 28 working days from receipt. Excessive or multiple access requests that disrupt the day to day running of the office will be charged.